80e138cc36a174875119a2481d01958ea6012121a37c908a765a07905099fb56

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 18:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 29KB
Sample261029-w354baft4p
SHA256 80e138cc36a174875119a2481d01958ea6012121a37c908a765a07905099fb56
MD5 bd2a577b7da29a25e5e081acdfb2acfc
SHA1 0af69c4d5d803aa8959533cc0e8dfb219a12b58b
SHA512 cf52085134629c3e1ae746fd423b51dd0e8e413c00b01a0c3b1e93e68012f1c716c9a24a4495e46171c5fe7a1954ac449459ec6db16b27379c3706cf3b9c00e9
SSDEEP 384:okq2/7ir/ZdSZUaAskWjHE+wqaZiNo0J6EtfXK9hBlRxQsm+uIv+5Z2Tq6CI2IBA:5qNZdypJ4+wqaAiIyJDxq+I6Z1Wo0sC1
TLSH
T105D2087290AD01273F1EC3ED92A0B329F4B99628DA065B76B0F9315849D4DF711BB21E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4348	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{2BD619EC-BF13-47C8-9A4F-B57F2CFAF3FC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1456	msedge.exe
1456	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3136 wrote to memory of 4684	3136	msedge.exe	88
PID 3136 wrote to memory of 4348	3136	msedge.exe	91
PID 3136 wrote to memory of 3372	3136	msedge.exe	92
PID 3136 wrote to memory of 3372	3136	msedge.exe	92
PID 3136 wrote to memory of 3372	3136	msedge.exe	92
PID 3136 wrote to memory of 4292	3136	msedge.exe	93
PID 3136 wrote to memory of 4292	3136	msedge.exe	93
PID 3136 wrote to memory of 4512	3136	msedge.exe	94
PID 3136 wrote to memory of 4512	3136	msedge.exe	94
PID 3136 wrote to memory of 4512	3136	msedge.exe	94
PID 3136 wrote to memory of 1780	3136	msedge.exe	95
PID 3136 wrote to memory of 1780	3136	msedge.exe	95
PID 3136 wrote to memory of 1780	3136	msedge.exe	95
PID 3136 wrote to memory of 808	3136	msedge.exe	96
PID 3136 wrote to memory of 2984	3136	msedge.exe	97
PID 3136 wrote to memory of 808	3136	msedge.exe	96
PID 3136 wrote to memory of 808	3136	msedge.exe	96
PID 3136 wrote to memory of 2984	3136	msedge.exe	97
PID 3136 wrote to memory of 2984	3136	msedge.exe	97
PID 3136 wrote to memory of 4488	3136	msedge.exe	99
PID 3136 wrote to memory of 2924	3136	msedge.exe	100
PID 3136 wrote to memory of 4488	3136	msedge.exe	99
PID 3136 wrote to memory of 2924	3136	msedge.exe	100
PID 3136 wrote to memory of 6060	3136	msedge.exe	102
PID 3136 wrote to memory of 1724	3136	msedge.exe	106
PID 3136 wrote to memory of 2912	3136	msedge.exe	107
PID 3136 wrote to memory of 3516	3136	msedge.exe	108
PID 3136 wrote to memory of 4496	3136	msedge.exe	109
PID 3136 wrote to memory of 4496	3136	msedge.exe	109
PID 3136 wrote to memory of 1456	3136	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff946dfc188,0x7ff946dfc194,0x7ff946dfc1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2228,i,17805953628938162051,17926199624589443363,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,2306390528078875657,5227904135017298718,262144 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:2
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2408,i,264917580465526199,15468976817251006449,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:13
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,15760539707636165309,1129079567058142462,2097152 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,14341266154838275783,12167114796768369985,2097152 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,1349667790964700632,2381957135081819227,2097152 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:9
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,6657192679087135418,18064650169662601440,2097152 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5340,i,14755614105217526517,17322630646423524876,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=3856,i,8553037886708346562,735014377831615847,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5964,i,138748295252525474,6112717922577146350,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5964,i,138748295252525474,6112717922577146350,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1232,i,15700675350825313314,8540538081604952251,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1236,i,14307387073183599384,2624018452939738900,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=1364 /prefetch:14
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1240,i,17554477459212162222,4078609011295234981,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5480,i,4866558706417253438,6226371761344414869,524288 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6428,i,12576730900101552899,13558783795344441716,262144 --field-trial-handle=2796,i,243674260035325087,8252398610523064522,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1456

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

12ebc169-487a-4442-87ec-6a742701cb9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12ebc169-487a-4442-87ec-6a742701cb9f.tmp
Size 37KB
SHA256 5655aa72e67f8a19de8add16465d741bf0be67dbd0e1ffbdb22617fcca67d139
MD5 20ba1f737f548f1bc28af5030252d419
SHA1 7140fce1b49e124b4cd62fa8d91c21b3968f916f
SHA512 a5da2191bb30db0336886ae792560fd922464786cabfb1a00788f0bb1a55b95dc94fa1df67d7aa0dce3249e7c609a36df209088e652c086b10feda19272790fc
SSDEEP 768:R/UxvxjgC+W3jWxc7fZrKTHhp5XSwQs88uBkiTCZ/P84g:kZj3+W3jLtrKvILNB0Hg
TLSH
T15603D039F8D45873ACB39385365A275BAFF05053C4C41BA889EE7A0E02CB75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f3f8933-7cf9-4a50-b5ad-0d72b1bae56a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f3f8933-7cf9-4a50-b5ad-0d72b1bae56a.tmp
Size 36KB
SHA256 08e30fa76a33a9ffcc62313a3600584b92bc6715785960f4a1ede876af228330
MD5 e65f35eb95995dbfab92122e6884fff3
SHA1 9245e54b46112d02b7d0a355c02821e1fd670172
SHA512 c8bff3eee3417c2584a06dfa787925c47d68c9c55dcb4ed8a403aa0feb7c4491bee1ab491dd61de1702303ca7c87ae4f29bae601f9dc5e170795a17a0f00baec
SSDEEP 768:SFdX3bwgzcmbc7fZrKTHyHgJp5XSwQs88uBkiT2RoaTZcALW:iX3Nc5trKSA3ILNBE91C
TLSH
T112F2AF36E8C48977ADB68781BA4E3703EFF05147C8C45694D6DEA51D02CB29E238FC96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4e5558b-edf4-401e-ac43-3e910e252d78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\a4e5558b-edf4-401e-ac43-3e910e252d78.tmp
Size 105KB
SHA256 baa37fb90b22728e8621cb1e0cd8370d14339295fb597cb899c58908f1d9ea43
MD5 3cf096da5ebbeb243b3cc63b1ce61c42
SHA1 ca076b08c459cee4e3c214a706dff7f9e182cb83
SHA512 9947e993a1b05c95053c60c8e5a9c544169c0476f5ca113971ea72db5ce4a94442075b08a2a9e36d34e5f00f8b4a8b4233e22fa2a713e941c9d3b5cc8e620092
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

616775e0-e1fb-48d1-9cd4-0bc1f399f5a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\616775e0-e1fb-48d1-9cd4-0bc1f399f5a5.tmp
Size 23KB
SHA256 df96858ced85524de07b7ca6e74b6ead649cf9ea50e31ceab18d40e2d1ad713d
MD5 97826c2cf681833e120fd900d675a4c2
SHA1 5d5e1029fd3bd21e688280c9331b1a15ba0f40b2
SHA512 bf9615178a9ae46b68a33067a7cddf305b1d477275891c2c18208f772ed612af8b57b88343a78dd56f89f9e6c356b8200f85311309367f88148cf09abd4882bc
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXfroJeE:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0V5
TLSH
T11EB2D92B640CCB7F4FC04A9EA8197FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

652b17c4-d819-4a6e-9a72-5bcccd81d994.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\652b17c4-d819-4a6e-9a72-5bcccd81d994.tmp
Size 11KB
SHA256 0c936edde82156aa3422bc887676636199a67847fc9f9437547143b5965e5599
MD5 f86b181ee65c31412f00ff457a3d1770
SHA1 deca27176a585407523852d090bafb8c140b0726
SHA512 33ca9a7f8298d21a5d35a2fa8bffbe64252471278cdb578433c70afa265e2c5ccd3a63eccb7a50a2398dede453fee267fa3bf1b791cea5d4826c5c821ac717d5
SSDEEP 192:sxRWRy7b4/fKs0HRiezoA8p4Z/g6+WNIYEGyk+GhIgDGJ:sxRW0f4/fKs0qI/5IKz+
TLSH
T1F532A715AD28A93B8CDBD31DBA55BF53D7F91032A0D02E48B6FC861C04E76DE620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8073974f-1c5b-4128-a1c4-31a29790a52a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8073974f-1c5b-4128-a1c4-31a29790a52a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8d6f3613-c95b-45b8-9fe7-81fc74720fd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8d6f3613-c95b-45b8-9fe7-81fc74720fd6.tmp
Size 11KB
SHA256 ea843689fbc21d1d573e964da882d24fe105887f0474108c07aeffd0c0e4e20b
MD5 617489b524af87b4bcab9e589187cb80
SHA1 b51327e2a06d0a0843656557220cddbe620d836b
SHA512 73b16a9408b88e9955e2897bf9c70bb49969db74271887ffc89fc7cbcac2ff2a430f8ea8941f1f580bd1cf84e546b7061b7a268774de375c330bfeb1a8852082
SSDEEP 192:sxRWRy7b4/fKseHRiezoA8p4Z/g6+WNIYE8+k+GhIgDcJ:sxRW0f4/fKseqI/5Iiz8
TLSH
T10542A615AD28A93B9CDBD30DBA567F53D7F95032A0D12E48B6FC861C04E76DE620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8db78dfa-d575-4b7f-b0cd-07ae31e00d38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8db78dfa-d575-4b7f-b0cd-07ae31e00d38.tmp
Size 11KB
SHA256 887586214bbed7e1685ceacd98318359ba493e6271f89b059d4693a33c5c7c6c
MD5 20febb5a8c39f4577f83e519125ad281
SHA1 1f5782275c8aa4e204468527f0472daa38b0245b
SHA512 6f662b9884883f6de2b6e8c97c897d3d2c7fdf78dc3f1759d5a91995a09f59d9092beb08779a8f8edfd389f5cb334a55dd573697bfd5ed94d24958ac584b1506
SSDEEP 192:sxRVRy7b4/fKs8HRiezoA8p4Z/g6+WNIYEGyk+GhIgIJ:sxRV0f4/fKs8qI/5IKzs
TLSH
T12532A615AD28A93B8CDBD21DBA66BF53D7F91032A0D01E48B6FC861C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b20fa896e9d495b97fd6f3a35f42a1b3ab0cdde9da829314432eedff45f1380b
MD5 8c53191eaf8993e5fdb86952e149acca
SHA1 177303a2c96877665a083eeb5970d611dd982e36
SHA512 22d048b0bd9dc4a582a6e7dfe386c05e6f585fba301b4ce6981d148e6666dfa590c83bf91f353e42c1524b34eaff98453b883d6052762d7416d1ff4b88c3a059
TLSH
T1C251A6896661A0B4E7A719704DD132C37B34867ED7FB2E9E0DF8F4B51B4E350601103A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2484ed962eb21c2b50e4625896c28c51c911f9fc062babfcd1e9ee41dcdc9898
MD5 3a0f2c13eae295c03d0c94e130aee2ac
SHA1 8a1ce258a3be2f39d88b2993cf0a4d2877800126
SHA512 ca567c47e35676ca4ca1738474eed40bb8e11d3dddbbeb3c0eba43c3e6877304eac3e450caa174d5f941eef01dc60dc700ec015aef38f71d1498f9acc8a5b292
TLSH
T1875194896661A0B4E7A719704DE122C77B34867ED7FB2E9A0CF8F0B51B4E350601103A
MD5 SHA1 SHA512 TLSH

Submit Download

ac3be891-5e74-41cb-905a-ff85dff54514.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ac3be891-5e74-41cb-905a-ff85dff54514.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

154dc80a-6e5d-44be-81ec-b7c156b166f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\154dc80a-6e5d-44be-81ec-b7c156b166f6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

52043c8a-30b3-471c-b08c-5cb27955741f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\52043c8a-30b3-471c-b08c-5cb27955741f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

95980b4b-7b4a-44d8-a75f-19a1b119d380.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\95980b4b-7b4a-44d8-a75f-19a1b119d380.tmp
Size 1KB
SHA256 68175f5113994dbe17b354cc069093ff1aed6c7932fbfebc1601ca368173dbd8
MD5 236ac87798eeddb50b8adc3162327f72
SHA1 98e1d4bec957aa29733bdff8597fef55b0552150
SHA512 e7c32c46670d0c6f087382cee56fb840ca4d55e36ef1dabf6834a2895e79802430b0589485a0a8094ae82137dda271cb43e98dc0a53e4000c9f0f16925d2330d
TLSH
T1D131C2F783B4857E9A0586F0AA14AF1FCE1D0515436C7C6985E49E2B93F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f85f8d81e55ee583c2acba99dc1a0a69a0dff949f084476249e419a2be9f8891
MD5 73fee22c1cce2971e11e93da34438217
SHA1 c2fe2dcd104ad0c9ec3b5ddec5bb11b21f35eaca
SHA512 44eaf246a6a9a14bc41f30c9a242bcb822a1be978f8a796ef62e3f9453ed2098715c7ec3517f351299339d609ac28ef35c542281297e95da46ac192a93e3168f
SSDEEP 96:KYLSKYQaaZ8lJXLPkfLSPFhkKNBFvkRpJyXtqBqOqVqxqvqLqfqgrqTqcqz5q5qX:8J/VqBqOqVqxqvqLqfqwqTqcqVq5q9qg
TLSH
T133914251307B5600387E3A8841B4963B524272B3765AE97BBFBC41B24F2EE055CFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f3b4af7a-9d63-4c71-a13e-8830a945acec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3b4af7a-9d63-4c71-a13e-8830a945acec.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34438212-eb57-4a43-9885-53e39b86ed81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\34438212-eb57-4a43-9885-53e39b86ed81.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8eb4fc2-eecc-4075-8905-f7b8c1ce425a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a8eb4fc2-eecc-4075-8905-f7b8c1ce425a.tmp
Size 38KB
SHA256 b3e1035f3796a9831ca29bd60912a39c08c2bcd70c38931dd7d63d5916c0d1cf
MD5 cb44e6f3e27462ec4e5352415e19281b
SHA1 ed08e1f9466f0407c0de6231349623d2bc1af1a1
SHA512 338bfd9f620ce5c75f986dd67339afa88c464ccd9b93491d1e2d6399da5a5dda10c826aac71eba113eab3a376062ad114ae77d0037c0acc684efc7e9eb399236
SSDEEP 768:9/UxvxjgC+W3FGpc7fZrKTHyHRp5XSwQs88uBkiTzR/P84g:gZj3+W3FvtrKSfILNBTHg
TLSH
T15A03C039F8945877ACB39381365F234BAFF06153C4C41AA849EE7A0E02CB75D674B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a96dee78-1bd1-4576-bbe1-d587f5f4e8e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a96dee78-1bd1-4576-bbe1-d587f5f4e8e2.tmp
Size 33KB
SHA256 689ccb8a754b78cc5d6d14fd7bb2b6c3a8d5cbdb0ca33eb0a8eba72b9981fcc4
MD5 285427379292c69aef165f257a764eaf
SHA1 57f61698e0df24060c8598ea843ea69f006c9d32
SHA512 124c4b91e0ad56b44c79c63e44dcc39eae87666ccffe53f2ab0c18ab4cff59900284315a04b26de336976a9fe073b26ba9312d1c7fffe4fef2a339fab341e124
SSDEEP 768:BI3/cmbc7fZrKTHyHCp5XSwQs88uBkiT2RoaTZcALW:BI3/c5trKS8ILNBE91C
TLSH
T18BF2AE35F89458675DA293817A4A3703AFF0A247C8C80A98C5DEA61D02CB76E778F857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a60f793-294a-4eb4-bea2-e5365d192217.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8a60f793-294a-4eb4-bea2-e5365d192217.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f96f7f96-d479-4e2e-bcf6-9c34f3814d83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f96f7f96-d479-4e2e-bcf6-9c34f3814d83.tmp
Size 33KB
SHA256 a703cedc202cc64cb463aeae9c41fa22a318acffb62209b60025726fb4b0f02f
MD5 9ae91b8fbd6d57c909260ebc8fc22313
SHA1 8d328c5863a293a90386de17e1ce2bba52989c4e
SHA512 5895750d8faedef4015391d75f6571754118b6ec5a8ea16b298a077e81f7766c796ce2c99eecaa09940755cee67a5ede1e40ee9c7544c4734e1ffec07dbdb573
SSDEEP 768:0I3Esmbc7fZrKTHyHCp5XSwQs88uBkiT2RoaTZcALW:0I3Es5trKS8ILNBE91C
TLSH
T129F2AE35F89458675DB293817A4E3703AFF0A147C8C80A98C5DEA61D02CB76E778F857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download